Snort mailing list archives
Dshield perl script.
From: "Jaco Lange" <jaco () e-Innovation co za>
Date: Wed, 18 Sep 2002 15:49:09 +0200
** High Priority ** ** Reply Requested When Convenient ** Hi Mark I tried the perl scrip you written for Snort ACID and MYSQL I found it very usesfull, everything works just the IP address is returned in a funny way, it looks like it in not converted to a ip address format xxx.xxx.xx.xx insted I get a Number Subject FORMAT DSHIELD USERID 12345678 TZ +02:00 2002-09-17 15:16:00 +01:00 USERID 1 3232236545 8080 3232236309 1190 TCP how do I get this IP ? Any help appreciated. Thanks Jaco lange _______________________________ Jaco Lange e-Innovation Consulting P O BOX 12937 Hatfield, 0028 Cell: +27-(0)833053854 Tel: +27-(0)12-807 1864 Fax: +27-(0)12-807 1829 http://www.e-innovation.co.za/ _______________________________ "This e-mail may contain confidential information and may be legally privileged and is intended only for the person to whom it is addressed. If you are not the intended recipient, you are notified that you may not use, distribute or copy this document in any manner whatsoever. Kindly also notify the sender immediately by telephone, and delete the e-mail. When addressed to clients of the company from where this e-mail originates ("the sending company ") any opinion or advice contained in this e-mail is subject to the terms and conditions expressed in any applicable terms of business or client engagement letter . The sending company does not accept liability for any damage, loss or expense arising from this e-mail and/or from the accessing of any files attached to this e-mail."
Attachment:
dshield.pl
Description:
Current thread:
- Dshield perl script. Jaco Lange (Sep 18)
- Re: Dshield perl script. Mark Rowlands (Sep 18)
- <Possible follow-ups>
- RE: Dshield perl script. Hutchinson, Andrew (Sep 18)